1 . An encrypted television signal, comprising: 

a plurality of encrypted samples of the television program, the samples being 
encrypted under a first encryption method; and 
an unencrypted portion. 

2. The encrypted television signal according to claim 1 , wherein the television 
signal is a digital television signal, and wherein the encrypted samples comprise 
encrypted packets, and the unencrypted portion comprises unencrypted packets. 

3. The encrypted television signal according to claim 2, wherein the digital 
television signal complies with an MPEG standard, and wherein the encrypted 
packets are identified by a packet identifier. 

4. The encrypted television signal according to claim 2, wherein the digital 
television signal complies with an MPEG standard, and wherein the unencrypted 
packets are identified by a first packet identifier, and wherein the encrypted 
packets are identified by the first packet identifier. 

5. The encrypted television signal according to claim 2, wherein the digital 
television signal complies with an MPEG standard, and wherein the unencrypted 
packets are identified by a first packet identifier, and wherein the encrypted packets 
are identified by a second packet identifier. 
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6. An encrypted television program, comprising: 
a plurality of unencrypted packets; and 

a plurality of encrypted packets, wherein both the unencrypted and the 
encrypted packets are required to decode the television program. 

7. The encrypted television program according to claim 6, wherein the 
unencrypted packets and encrypted packets comprise transport stream packets. 

8. The encrypted television program according to claim 6, wherein the digital 
television signal complies with an MPEG standard, and wherein the encrypted and 
unencrypted packets are identified by a packet identifier. 

9. The encrypted television program according to claim 6, wherein the digital 
television signal complies with an MPEG standard, and wherein the unencrypted 
packets are identified by a primary packet identifier, and wherein the encrypted 
packets are identified by a secondary packet identifier. 
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1 0. A method of encrypting content, comprising: 

identifying a portion of the content to encrypt according to a selection 
algorithm where less than 100% of the content is encrypted; 

encrypting the identified content portion according to a first encryption 
method to produce a first encrypted content portion; 

encrypting the identified content according to a second encryption method 
to produce a second encrypted content portion; and 

combining an unencrypted content portion along with the first and second 
encrypted content portions to produce partially dual encrypted content. 

1 1 . The method according to claim 1 0, further comprising combining the content 
portion with the first and second encrypted content portions to produce dual 
partially encrypted content. 

12. The method according to claim 10, further comprising distributing the 
unencrypted content portion along with the first and second encrypted content 
portions. 

13. The method according to claim 10, wherein the content comprises a 
television signal and the partially dual encrypted content comprises a partially dual 
encrypted television signal. 

14. The method according to claim 13, further comprising distributing the 
partially dual encrypted television signal over one of the following: a cable system, 
a terrestrial broadcast system, satellite system, and as packaged media. 

15. The method according to claim 13, wherein the television signal has an 
audio portion, a video portion and a system information portion. 
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16. The method according to claim 15, wherein the selection algorithm 
comprises selecting system information for encrypting. 

17. The method according to claim 15, wherein the selection algorithm 
comprises selecting the audio portion for encrypting. 

18. The method according to claim 15, wherein the selection algorithm 
comprises selecting the video portion for encrypting. 

19. The method according to claim 10, wherein the content is comprised of 
multiple programs and wherein the selection algorithm comprises sequentially 
selecting each program for a period of time for encryption. 

20. The method according to claim 10, wherein the content is comprised of 
multiple programs and wherein the selection algorithm comprises selecting fewer 
than 100% of the programs for a period of time for encryption. 

21. The method according to claim 10, wherein the content is comprised of 
blocks of data and wherein the selection algorithm comprises selecting N blocks 
for every M* 1 block of content for encryption, where N is less than M. 

22. The method according to claim 1 0, wherein the content is comprised of data 
structures and wherein the selection algorithm comprises selecting a fraction of the 
data structures for encrypting. 

23. The method according to claim 10, wherein the content is comprised of 
compressed data, wherein the algorithm comprises selection of data needed for 
decompressing the content for encrypting. 
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24. The method according to claim 10, wherein the content is comprised of a 
plurality of elementary streams, and wherein the algorithm comprises selecting 
header information for encrypting. 

25 The method according to claim 24, wherein the header information 
comprises at least one of packetized elementary stream (PES) header, sequence 
header, sequence header extension, and group of pictures (GOP) header. 

26. The method according to claim 1 0, wherein the content is packetized using 
a first packet identifier (PID), and the PID for packets containing content selected 
for encryption is mapped to a second PID. 

27. The method according to claim 10, further comprising distributing the 
unencrypted content portion separately from the first and second encrypted content 
portions. 

28. An electronic storage medium storing instructions which, when executed on 
a programmed processor, carry out the method of encrypting content according to 
claim 10. 

29. An electronic transmission medium carrying encrypted content encrypted by 
the method according to claim 10. 
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30. A method of encrypting content, comprising: 

encrypting content according to a first encryption method to produce a first 
encrypted content portion; and 

combining the first encrypted content portion with an unencrypted content 
portion to produce partially encrypted content. 

31 . The method according to claim 30, wherein the partially encrypted content 
comprises a television signal. 

32. The method according to claim 31 , wherein the partially encrypted television 
signal is distributed over one of the following: a cable system, a terrestrial 
broadcast system, satellite system, and as packaged media. 
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1 33. A method of managing multiple access control systems within an audio 

2 visual content distribution system, comprising: 

3 identifying a portion of the content to replicate for each of a plurality of 

4 access control systems according to a selection algorithm wherein less than 1 00% 

5 of the content is replicated; and 

6 replicating the identified portion. 
7 

8 34. The method according to claim 33, further comprising encrypting the 

9 replicated identified portion using a first encryption algorithm. 
10 

fj 35. The method according to claim 34, further comprising: 

ft replicating the identified portion a second time to produce a second 

13 replicated portion; and 

B encrypting the second replicated portion using a second encryption 

# algorithm. 

If 

36. The method according to claim 35, further comprising combining the 

11 identified portion with the encrypted replicated portion and the encrypted second 

U replicated portion to produce dual partially encrypted content. 
20 

21 37. The method according to claim 36, wherein the dual partially encrypted 

22 content is distributed over one of the following: a cable system, a terrestrial 

23 broadcast system, satellite system, and as packaged media. 
24 

25 38. The method according to claim 36, further comprising assigning a separated 

26 packet identifier to packets containing each of the identified content, the encrypted 

27 replicated identified portion and the encrypted second replicated portion. 
28 

29 39. The method according to claim 33, wherein the content comprises television 

30 content. 
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1 40. A method of encoding a packetized digital television signal, comprising: 

2 encrypting a portion of the packets containing the digital television signal 

3 according to a first encryption algorithm; 

4 encrypting the portion of the packets containing the digital television signal 

5 according to a second encryption algorithm; 

6 leaving a portion of the packets containing the digital television signal 

7 unencrypted; 

8 assigning a primary packet identifier to the unencrypted packets; 

9 assigning a primary packet identifier to the packets encrypted under the first 

10 encryption algorithm; and 

11 assigning a secondary packet identifier to the packets encrypted under the 
ft second encryption algorithm. 

ft 

p 41 . The method according to claim 40, further comprising generating information 

'1:5.7 

# linking the digital television signal to the primary and secondary packet identifiers. 

h 

42. The method according to claim 41, further comprising transmitting the 

|8 information linking the digital television signal to the primary and secondary packet 

|j| identifiers as program specific information (PSI). 
20 

21 43. The method according to claim 40, further comprising transmitting the 

22 unencrypted packets along with the packets encrypted under the first and second 

23 encryption algorithms over one of the following: a cable system, a terrestrial 

24 broadcast system and satellite system. 
25 
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1 44. A packet selector and duplicator device, comprising: 

2 input means for receiving a stream of clear packets from a satellite 

3 descrambler; 

4 means for selecting a group of packets for dual encryption while leaving a 

5 remaining set of clear packets; 

6 means for duplicating the selected packets to provide a first and second set 

7 of duplicate packets; 

8 means for assigning a first packet identifier to the first set of duplicate 

9 packets and assigning a second packet identifier to the second set of duplicate 
10 packets; 

Hjl means for multiplexing the first set of duplicate packets and the second set 

j$£ of duplicate packets with the set of clear packets to produce an output stream of 

ijj3 packets. 

4 

Jfj 45. The apparatus according to claim 44, further comprising a first encrypter that 

%p encrypts the first set of duplicate packets and the set of clear packets under a first 

"SIS? 

W encryption algorithm. 

w 

IP 46. The apparatus according to claim 44 further comprising a first encrypter that 

20 encrypts packets having the first packet identifier under a first encryption algorithm. 
21 

22 47. The apparatus according to claim 44, further comprising a second encrypter 

23 that encrypts the second set of duplicate packets under a second encryption 

24 algorithm. 
25 

26 48. The apparatus according to claim 47, wherein the stream of clear packets 

27 further comprises packets containing system information; and further comprising 

28 means for modifying the system information to identify the encryption used to 

29 encrypt the second set of duplicate packets. 
30 
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49. The apparatus according to claim 44, further comprising a second encrypter 
that encrypts packets having the second packet identifier under a second 
encryption algorithm. 

50. The apparatus according to claim 44, further comprising packet remapping 
means for remapping packet identifiers so that the first set of duplicate packets and 
the set of clear packets are assigned the same packet identifier. 

51 . The apparatus according to claim 44, wherein the means for selecting a 
group of packets for dual encryption selects the packets by determining that the 
packet contains an elementary stream header. 

52. The apparatus according to claim 44, wherein the means for selecting a 
group of packets for dual encryption selects the packets according to a time 
dependent algorithm. 

53. The apparatus according to claim 44, wherein the means for selecting a 
group of packets for dual encryption selects the packets by determining that the 
packet contains audio information. 

54. The apparatus according to claim 44, wherein the means for selecting a 
group of packets for dual encryption selects the packets by determining that the 
packet contains video information. 

55. The apparatus according to claim 44, wherein the means for selecting a 
group of packets for dual encryption selects the packets by determining that the 
packet contains system information. 
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56. A packet identifier remapping apparatus, comprising: 

a demodulator that demodulates a stream of modulated packets, the stream 
of packets comprising clear packets with a first packet identifier, encrypted packets 
with a second packet identifier and packets with a third packet identifier; and 

a remapper that changes the packet identifiers so that the clear packets with 
the first packet identifier and the encrypted packets with the second packet 
identifier have the same packet identifier. 

57. The apparatus according to claim 56, wherein the packets with the third 
packet identifier comprise clear packets and further comprising an encrypter for 
encrypting the packets having the third packet identifier under a different algorithm 
than that used to encrypt packets having the second packet identifier. 

58. The apparatus according to claim 56, wherein the packets with the third 
packet identifier comprise encrypted packets, and wherein the packets with the 
third packet identifier are encrypted under a different algorithm than that used to 
encrypt packets having the second packet identifier. 

59. The apparatus according to claim 56, wherein the stream of modulated 
packets are quadrature amplitude modulated; and wherein the demodulator 
comprises a quadrature amplitude modulation demodulator. 

60. The apparatus according to claim 56, further comprising a multiplexer that 
combines the remapped packets with the packets with the third packet identifier 
to produce an output data stream. 

61. The apparatus according to claim 60, further comprising a quadrature 
amplitude modulator that modulates the output data stream. 
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1 62. The apparatus according to claim 56, wherein the stream of modulated 

2 packets further comprises packets containing system information; and further 

3 comprising means for modifying the system information to identify the encryption 

4 used to encrypt the packets having the third packet identifier. 
5 

6 
7 



firs. 




- 

ill 
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63. A method carried out at a television provider headend, comprising: 
receiving a feed of scrambled television content in the form of a stream of 

packets; 

descrambling the scrambled television content to produce a stream of clear 
packets; 

selecting a packet for dual encryption; 
duplicating the packet to provide first and second packets; 
re-mapping the first and second packets to first and second packet 
identifiers; 

encrypting the first packet under a first encryption algorithm to produce a first 
encrypted packet; 

encrypting the second packet under a second encryption algorithm to 
produce a second encrypted packet; 

re-mapping clear packets to the first packet identifier. 

64. The method according to claim 63, further comprising assembling a partially 
encrypted stream of packets by combining clear packets with the first packets and 
the second packets. 

65. The method according to claim 63, wherein the first and second packets are 
inserted adjacent one another in the partially encrypted stream of packets. 

66. The method according to claim 63, wherein the packets are selected for dual 
encryption based upon contents of the packet. 

67. The method according to claim 63, wherein the packets are selected for dual 
encryption based upon a timing sequence for sampling the stream of clear packets. 
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